[solomatov]

GDPR solve two problems: * Businesses which collect whatever data they can put their hands on, and sell it to the data brokers. Users formally allow it, because they hide permission to collect whatever they wanted in the TOS, which users accept without reading it. Examples of such businesses are creators of browser extensions, which collect all your browser history, or mobile apps which collect all your movements. Users often don't understand what's done with their data or that it's collected. * There's a very large incentive for companies, especially Google and Facebook, to provide only ad supported versions. The more person, well off, the more expensive their clicks are. GDPR substantially changes it, allowing people to control their data.